libre-solutions/iac

Fork 0

chore(deps): update dependency jinja2 to v3.1.6 #3

Open

renovate-bot wants to merge 1 commit from renovate/jinja2-3.x into master

renovate-bot commented

2024-06-08 01:32:02 +05:30

Member

This PR contains the following updates:

Package	Change	Age	Confidence
Jinja2 (changelog)	`==3.1.3` -> `==3.1.6`

Release Notes

pallets/jinja (Jinja2)

`v3.1.6`

Compare Source

Released 2025-03-05

The |attr filter does not bypass the environment's attribute lookup,
allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

`v3.1.5`

Compare Source

Released 2024-12-21

The sandboxed environment handles indirect calls to str.format, such as
by passing a stored reference to a filter that calls its argument.
:ghsa:q2x7-8rv6-6q7h
Escape template name before formatting it into error messages, to avoid
issues with names that contain f-string syntax.
:issue:1792, :ghsa:gmj6-6f8f-6699
Sandbox does not allow clear and pop on known mutable sequence
types. :issue:2032
Calling sync render for an async template uses asyncio.run.
:pr:1952
Avoid unclosed auto_aiter warnings. :pr:1960
Return an aclose-able AsyncGenerator from
Template.generate_async. :pr:1960
Avoid leaving root_render_func() unclosed in
Template.generate_async. :pr:1960
Avoid leaving async generators unclosed in blocks, includes and extends.
:pr:1960
The runtime uses the correct concat function for the current environment
when calling block references. :issue:1701
Make |unique async-aware, allowing it to be used after another
async-aware filter. :issue:1781
|int filter handles OverflowError from scientific notation.
:issue:1921
Make compiling deterministic for tuple unpacking in a {% set ... %}
call. :issue:2021
Fix dunder protocol (copy/pickle/etc) interaction with Undefined
objects. :issue:2025
Fix copy/pickle support for the internal missing object.
:issue:2027
Environment.overlay(enable_async) is applied correctly. :pr:2061
The error message from FileSystemLoader includes the paths that were
searched. :issue:1661
PackageLoader shows a clearer error message when the package does not
contain the templates directory. :issue:1705
Improve annotations for methods returning copies. :pr:1880
urlize does not add mailto: to values like @a@b. :pr:1870
Tests decorated with @pass_context`` can be used with the ``|select`` filter. :issue:1624`
Using set for multiple assignment (a, b = 1, 2) does not fail when the
target is a namespace attribute. :issue:1413
Using set in all branches of {% if %}{% elif %}{% else %} blocks
does not cause the variable to be considered initially undefined.
:issue:1253

`v3.1.4`

Compare Source

Released 2024-05-05

The xmlattr filter does not allow keys with / solidus, >
greater-than sign, or = equals sign, in addition to disallowing spaces.
Regardless of any validation done by Jinja, user input should never be used
as keys to this filter, or must be separately validated first.
:ghsa:h75v-3vvj-5mfj

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [Jinja2](https://github.com/pallets/jinja) ([changelog](https://jinja.palletsprojects.com/changes/)) | `==3.1.3` -> `==3.1.6` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/jinja2/3.1.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/jinja2/3.1.3/3.1.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>pallets/jinja (Jinja2)</summary> ### [`v3.1.6`](https://github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-316) [Compare Source](https://github.com/pallets/jinja/compare/3.1.5...3.1.6) Released 2025-03-05 - The `|attr` filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:`cpwx-vrp4-4pq7` ### [`v3.1.5`](https://github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-315) [Compare Source](https://github.com/pallets/jinja/compare/3.1.4...3.1.5) Released 2024-12-21 - The sandboxed environment handles indirect calls to `str.format`, such as by passing a stored reference to a filter that calls its argument. :ghsa:`q2x7-8rv6-6q7h` - Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:`1792`, :ghsa:`gmj6-6f8f-6699` - Sandbox does not allow `clear` and `pop` on known mutable sequence types. :issue:`2032` - Calling sync `render` for an async template uses `asyncio.run`. :pr:`1952` - Avoid unclosed `auto_aiter` warnings. :pr:`1960` - Return an `aclose`-able `AsyncGenerator` from `Template.generate_async`. :pr:`1960` - Avoid leaving `root_render_func()` unclosed in `Template.generate_async`. :pr:`1960` - Avoid leaving async generators unclosed in blocks, includes and extends. :pr:`1960` - The runtime uses the correct `concat` function for the current environment when calling block references. :issue:`1701` - Make `|unique` async-aware, allowing it to be used after another async-aware filter. :issue:`1781` - `|int` filter handles `OverflowError` from scientific notation. :issue:`1921` - Make compiling deterministic for tuple unpacking in a `{% set ... %}` call. :issue:`2021` - Fix dunder protocol (`copy`/`pickle`/etc) interaction with `Undefined` objects. :issue:`2025` - Fix `copy`/`pickle` support for the internal `missing` object. :issue:`2027` - `Environment.overlay(enable_async)` is applied correctly. :pr:`2061` - The error message from `FileSystemLoader` includes the paths that were searched. :issue:`1661` - `PackageLoader` shows a clearer error message when the package does not contain the templates directory. :issue:`1705` - Improve annotations for methods returning copies. :pr:`1880` - `urlize` does not add `mailto:` to values like `@a@b`. :pr:`1870` - Tests decorated with `@pass_context`` can be used with the ``|select`` filter. :issue:`1624\` - Using `set` for multiple assignment (`a, b = 1, 2`) does not fail when the target is a namespace attribute. :issue:`1413` - Using `set` in all branches of `{% if %}{% elif %}{% else %}` blocks does not cause the variable to be considered initially undefined. :issue:`1253` ### [`v3.1.4`](https://github.com/pallets/jinja/blob/HEAD/CHANGES.rst#Version-314) [Compare Source](https://github.com/pallets/jinja/compare/3.1.3...3.1.4) Released 2024-05-05 - The `xmlattr` filter does not allow keys with `/` solidus, `>` greater-than sign, or `=` equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. :ghsa:`h75v-3vvj-5mfj` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the

renovate-bot

label

2024-06-08 01:32:02 +05:30

renovate-bot changed title from ~~chore(deps): update dependency jinja2 to v3.1.4~~ to chore(deps): update dependency jinja2 to v3.1.5

2024-12-23 18:12:37 +05:30

renovate-bot force-pushed renovate/jinja2-3.x from 93644eb830 to 161fd79806

2024-12-23 18:12:39 +05:30

Compare

renovate-bot changed title from ~~chore(deps): update dependency jinja2 to v3.1.5~~ to chore(deps): update dependency jinja2 to v3.1.6

2025-03-17 05:13:25 +05:30

renovate-bot force-pushed renovate/jinja2-3.x from 161fd79806 to a857dfbdfd

2025-03-17 05:13:27 +05:30

Compare

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/jinja2-3.x:renovate/jinja2-3.x

git switch renovate/jinja2-3.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff renovate/jinja2-3.x

git switch renovate/jinja2-3.x

git rebase master

git switch master

git merge --ff-only renovate/jinja2-3.x

git switch renovate/jinja2-3.x

git rebase master

git switch master

git merge --no-ff renovate/jinja2-3.x

git switch master

git merge --squash renovate/jinja2-3.x